Apache CouchDB 2.3.0 Cross Site Request Forgery

Apache CouchDB version 2.3.0 suffers from cross site request forgery vulnerabilities providing there’s a loose CORs policy.

Leave a Reply